Critical severity9.8CISA KEVNVD Advisory· Published Aug 28, 2026· Updated Sep 3, 2026
CVE-2026-82329
CVE-2026-82329
Description
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- docs.jfrog.com/releases/docs/jfrog-security-advisoriesnvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party AdvisoryUS Government Resource
- docs.jfrog.com/releases/docs/artifactory-self-managed-releasesnvdRelease Notes
News mentions
16- OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromisedHelp Net Security · Sep 30, 2026
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- Three JFrog Artifactory Flaws Exploited for Backdoor DeploymentSecurityWeek · Sep 14, 2026
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVThe Hacker News · Sep 12, 2026
- More JFrog Artifactory bugs under attack, and all 3 have patchesThe Register Security · Sep 11, 2026
- JFrog Artifactory Vulnerabilities Actively Exploited in the Wild to Gain Administrative ControlCyber Security News · Sep 11, 2026
- Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant BackdoorsThe Hacker News · Sep 11, 2026
- 7th September – Threat Intelligence ReportCheck Point Research · Sep 7, 2026
- Breach Roundup: FBI Probes Sale of 153 Million Driver's LicensesGovInfoSecurity · Sep 3, 2026
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersThe Hacker News · Sep 3, 2026
- Another Artifactory CVE under attack by AI agents or humansThe Register Security · Sep 1, 2026
- Attackers Pounce on Critical Artifactory Bug Following DisclosureDark Reading · Sep 1, 2026
- Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After DisclosureThe Hacker News · Sep 1, 2026
- JFrog Artifactory Auth Bypass Exploited in Attacks to Gain Admin AccessCyber Security News · Sep 1, 2026
- Critical JFrog Artifactory Vulnerability Reportedly Exploited in the WildSecurityWeek · Sep 1, 2026
- CISA Adds Seven Known Exploited Vulnerabilities to CatalogCISA Alerts